Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. (dot dot) in the name of a file, compressed into a zipped file named cred.zip, and downloaded to /sdcard/Download.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Traversal.html | Third Party Advisory |
| http://www.securityfocus.com/bid/77338 | Third Party Advisory VDB Entry |
| https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1 | Issue Tracking Third Party Advisory |
| http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Traversal.html | Third Party Advisory |
| http://www.securityfocus.com/bid/77338 | Third Party Advisory VDB Entry |
| https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1 | Issue Tracking Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 02:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Traversal.html - Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/77338 - Third Party Advisory, VDB Entry | |
| References | () https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1 - Issue Tracking, Third Party Advisory |
Information
Published : 2017-06-07 14:29
Updated : 2024-11-21 02:37
NVD link : CVE-2015-7888
Mitre link : CVE-2015-7888
CVE.ORG link : CVE-2015-7888
JSON object : View
Products Affected
samsung
- galaxy_s6_edge
- galaxy_s6_edge_firmware
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')